防火墙自动化测试工具的研究与实现

发布时间：2019-05-14 17:36

【摘要】：在如今这个互联网飞速发展的时代,防火墙作为抵御网络攻击、保护网络安全的工具,早已被普遍地应用于各种网络环境中。因此,防火墙的质量如何,能否有效地保障用户网络的安全就显得尤为重要。目前,对防火墙设备进行功能测试的方案主要是依靠手工测试,测试效率很低,并且难以保证测试的完备性。针对上述情况,本文提出了防火墙自动化测试工具的设想。即用PC代替昂贵的测试仪器,用程序自动化的测试代替传统手工测试,进而提高测试的效率。参照手工测试的流程,在VC++环境下,使用Winpcap进行网络编程,设计并实现了一个防火墙自动化测试工具,该工具能够仅使用PC就可以高效地完成防火墙设备功能测试的大部分内容。本文首先介绍了防火墙自动化测试工具的研究背景和意义,深入研究了国内外的研究现状,阐述了开发防火墙自动化测试工具的必要性。其次,分析了系统应达到的目标和功能上的需求,包括：防火墙手工测试的方法和流程,以及将其转化为自动化测试系统应达到的目标以及需要满足的功能上的要求。将防火墙手工测试的方法转化成自动化测试的方法,需要分为测试准备阶段和测试执行阶段两部分。因此,分析了这两部分在功能上的需求。然后,介绍了系统的分析与设计,其中包括：设计目标、功能模块的划分和设计。接着,针对系统各模块的设计和具体实现进行了详细阐述,包括：网卡选取、报文构造、导入流量模型、对测试用例进行规范化,并用程序进行解析、生成测试系统、测试执行、流量回放、显示系统配置信息等。其中测试执行模块分为单步执行、选择执行和批量执行三部分,使用Winpcap进行网络编程,实现发送报文、过滤报文、捕获报文和解析报文。最后,介绍了系统测试案例及结果。测试结果表明,所实现的系统达到了预定的设计目标要求。
[Abstract]:In this era of rapid development of the Internet, firewall, as a tool to resist network attacks and protect network security, has long been widely used in various network environments. Therefore, it is particularly important whether the quality of firewall can effectively ensure the security of user network. At present, the functional test scheme of firewall equipment mainly depends on manual testing, the test efficiency is very low, and it is difficult to ensure the completeness of the test. In view of the above situation, this paper puts forward the idea of firewall automation test tool. That is to say, PC is used instead of expensive test instrument, and program automation test is used instead of traditional manual test, so as to improve the efficiency of test. Referring to the process of manual testing, a firewall automation test tool is designed and implemented by using Winpcap for network programming in VC environment. The tool can efficiently complete most of the functional testing of firewall devices using PC alone. This paper first introduces the research background and significance of firewall automation test tool, deeply studies the research status at home and abroad, and expounds the necessity of developing firewall automation test tool. Secondly, the objectives and functional requirements of the system are analyzed, including the methods and processes of manual firewall testing, as well as the objectives that should be achieved by the automated test system and the functional requirements to be met. The method of firewall manual testing needs to be divided into two parts: test preparation phase and test execution phase. Therefore, the functional requirements of these two parts are analyzed. Then, the analysis and design of the system are introduced, including the design goal, the division and design of functional modules. Then, the design and implementation of each module of the system are described in detail, including: network card selection, message construction, import traffic model, standardization of test cases, and analysis with programs to generate the test system. Test execution, traffic playback, display system configuration information, etc. The test execution module is divided into three parts: single step execution, selection execution and batch execution. Winpcap is used for network programming to send messages, filter messages, capture messages and resolve messages. Finally, the system test cases and results are introduced. The test results show that the system meets the predetermined design objectives.
【学位授予单位】：西南交通大学
【学位级别】：硕士
【学位授予年份】：2015
【分类号】：TP393.08

【参考文献】